vincent-peugnet
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| wcms | 2 | – | Oct 3, 2026 |
Exploited and recent CVEs
- CVE-2026-105124 W (wcms) through 3.18.0 Unauthenticated Stored XSS via Login Username and Comments 0.2%
- CVE-2026-105123 W (wcms) through 3.18.0 RCE and Arbitrary File Write via Media Upload API 0.5%